backpropagate: --auth flag broken, UI unauthenticated in >=1.1.0
In backpropagate >= 1.1.0, the --auth flag is documented to require HTTP Basic authentication but the Reflex backend never reads the BACKPROPAGATE_UI_AUTH envir
What changed
In backpropagate >= 1.1.0, the --auth flag is documented to require HTTP Basic authentication but the Reflex backend never reads the BACKPROPAGATE_UI_AUTH environment variable, leaving the UI completely unauthenticated. Fixed in v1.2.0 with real ASGI middleware.
Who it affects
All users of backpropagate >= 1.1.0 who use the Reflex web UI, especially those who passed --auth or --share flags.
What to do today
Upgrade to backpropagate v1.2.0 immediately via pip install --upgrade backpropagate or npm install -g @mcptoolshop/backpropagate@latest. If unable to upgrade, do not use --auth or --share flags and use SSH port-forwarding instead.